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METHOD AND APPARATUS FOR DOCUMENTING CAP REMOVAL DATA 

Cross-Reference to Related Correspoading U.S. Applicationis 

This Application incorporates by reference commonly owned, co-pending U.S. 
Patent Application Serial No. 08/677,544 entitled "REMOTE AUDITING OF 
COMPUTER GENERATED OUTCOMES AND AUTHENTICATED BILLING AND 
ACCESS CONTROL SYSTEM USING CRYPTOGRAPHIC AND OTHER 
PROTOCOLS" filed August 8, 1996; commonly owned U.S. Patent No. 5,768,382 of the 
same title filed November 22, 1 995; and commonly owned, U.S. Patent No. 5,828,751 
entitled "METHOD AND SYSTEM FOR SECURE MEASUREMENT 
CERTIFICATION" filed April 8, 1996. 

BackgroHBd of the iBvention 

Field of the Invention 

The present invention relates generally to medicine containers. More particularly, 
the present invention relates to a method and ^paratus for documenting and authenticating 
medicine container c^ removal data. 

Description of the Related Art 

A major problem facing the health care mdustry today is the difficulty of enforcing 
patient compliance with prescription medications. All too often, patients ignore the 
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5 patient compliance with prescription medications. All too often, patients ignore the 
directions associated with their prescriptions, consuming more or fewer pills than that 
recommended by their doctor. Many patients simply forget to take the medication for one 
or more days, resuhing in a lengthened healing process, hi some cases, not taking pills 
according to a precise schedule can result in complications requiring expensive hospital 
10 stays or increased time consuhing with a physician. These cost increases from the patient's 
lack of compliance are passed on to health care providers and insurers. 

One approach to solving the problem of patient compliance has been the 
development of modified pill containers which automatically dispense the correct number 
of pills. U.S. Patent Number 5,641,091 to Daneshvar is a medication dispensing device 
15 which allows a patient to receive his medication on a regular basis. A series of small spaces 
are arranged in one or more electrically powered rotating trays to allow a proper dose via a 
window. While this approach makes it easier for a conscientious patient to follow his 
prescription, forgetful patients may simply let pills "build up" rather than consuming them. 
Additionally, such devices contain many moving parts that are subject to malfonction and 
20 wear. Malfimctions could result in legal liability if the patient was provided access to fewer 
pills than required by his prescription. 

A similar dispensing device is described in U.S. Patent Number 5,472.1 13 to Shaw. 
The automatic pill dispensing device of Shaw has cartridges rotated via an electric motor, 
electromagnetic clutches, a rotatable shaft, and gears. As with the Daneshvar device, there 
25 is no way for a remote third party to know whether or not the device is operating properly 
and whether the patient is in fact complying with his prescription. 
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Because third parties such as hospitals and insurance companies would like to have 
access to patient prescription compliance data, other devices have been created to store 
data such as how often a pill container has been opened or the time and date that it was 
opened. U.S. Patent Number 5,016,172 to Dessertine and U.S. Patent Number 4,939,705 to 
Hamilton et al. both describe such an apparatus. These devices, however, either require the 
user to physically deliver the apparatus to the interested third party for data retrieval and 
verification, or require that the device have a modem for online connection to the third 
party. Physical delivery is time consuming and potentially costly for the user, while an 
online connection requires expensive hardware and greater sophistication on the part of the 
user. 

A need therefore exists for a method and apparatus that addresses the deficiencies 
of the prior art. Specifically, a need exists for a reliable and efficient method and apparatus 
for securely measuring, reporting and tracking pill container access data generated in an 
off-line environment. Accordingly, the shortcomings associated vtith the related art have 
heretofore not been adequately addressed. The present invention addresses the deficiencies 
of the prior art by providing an appa^tus and processing approach that have not previously 
been proposed. 

Suminarv of the Invention 

An object of the present invention is to enable a user to document the number of 
times that he has accessed a pill container by removing the cap, with the cap removal data 
secured so that a third party can authenticate that the user performed the documented 
number of cap removals. 
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5 An advantage of the present invention is that it enables a user to automatically 

produce reliably documented cap removal data. Another advantage of the present 
invention is that it enables a third party to rely on a measurement of the cap removal data 
by a user of pill containers. Yet another advantage of the present invention is that it 
enables a third party to provide rebates, discounts, higher reimbursement levels or rewards 

10 to a user based on a measurement of the number of cap removals performed by the user. 

According to the present invention, a method and apparatus are disclosed for 
documenting cap removal data. The method includes the step of measuring a number of 
removals to determine cap removal data. The method further includes the step of encoding 
the determined cap removal data to deiivfe encoded cap removal data. The method also 

1 5 includes the step of outputting the encoded cap removal data. 

The above objects, features and advantages as well as other objects, features and 
advantages are readily apparent from the detailed description when taken in connection 
with the accompanying drawings. 

20 Brief Description of the Drawings 

A more complete appreciation of the invention and many of the attendant 
advantages thereof may be readily obtained by reference to the following detailed 
description when considered with the accompanying drawings, wherein: 

Figure 1 is a schematic block diagram illustrating the components of a system 
25 employing one embodiment of the present invention; 

Figure 2 is a schematic block diagram illustrating the components of the 
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5 documenting module of the system of Figure 1 ; 

Figure 3 is a schematic block diagram illustrating the components of the central 
controller of the system of Figure 1; 

Figure 4 depicts an exemplary cap removal data table stored in the memory of the 
documenting module; 

10 Figure 5 depicts an exemplary decoding protocol table stored in the memory of the 

central controller of Figure 3; 

Figure 6 depicts an exemplary user table stored in the memory of the central 
controller of Figure 3; 

Figure 7 is a flowchart illustrating the computer-implemented process steps 
15 enabling a user to document cap removal data; and 

Figures 8 is a flowchart illustrating the computer-implemented processes steps 
enabling a third party to authenticate cap removal data. 

Detailed Description 

20 Apparatus Architecture 

An embodiment of the apparatus of the present invention will now be discussed 
with reference to Figures 1-3. Figure J illustrates one exemplary system employmg a 
documenting module 200 configured to measure and encode cap removal data generated by 
a user 1 16, and report the encoded data to user 1 1 6. The system fiirther employs central 

25 controller 300 to receive the encoded cap removal data from user 11 6 via network 1 1 8. hi 
one embodiment, network 11 8 is the pubhc switched telephone network allowing the user 
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5 1 i 6 to communicate with central controller 300 via a standard telephone. Other suitable 
networks include local area networks ("LANs"), wide area networks ("WANs"), Intranets, 
the Internet, and the like. Such communication networks could also be wireless, allowing 
for cellular, infrared, or radio frequency ("RF") communications. Figure 2 provides a more 
detailed illustration of documenting module 200 shown in Figure 1. Figure 3 provides a 
10 more detailed illustration of central controller 300 depicted in Figure 1 . 

In a preferred embodiment, documenting module 200 includes elements 
incorporated within the cap of a prescription medication container, although it could also 
take the form of an add-on module attached to either the medicine bottle cap or bottle. 
Documenting module 200 could also be used in conjunction with a pill dispensing device 
15 that operated to vend pills. A wall-based system that was capable of holding a plurality of 
prescriptions could also incorporate the documenting technologies of the present invention. 

hi operation, a user employs documenting module 200 to measure and document 
the number of times that an openable or reclosable cap, lid, or other similar dispensing 
covering has been removed from the associated pill container. The container is equipped 
20 with a detector which generates a first electrical signal in response to the opening of the 

dispensing covering and alternatively a second electrical signal in response to the reclosing. 

hi accessing the pill container by removing or replacing the cap, user 1 16 causes 
cap removal data to be generated which is stored as a numeric value. This cap removal 
data may be the total number of times that the cap has been removed in a given time 
25 period, the number of days in which the cap was removed more than once, the number of 
days in which the cap was not removed, the average number of removals per day, etc. It 
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5 should be noted that the same measures may apply equally to cap replacement data which 
is similar to cap removal data in that both indicate the number of times that the container 
was accessed, hi addition to recording the quantity of removals, documenting module 200 
may store chronographic data regarding the timing of the removals. Such chronographic 
data may include the date/time of each removal, the average time of day of all removals 
1 0 over a particular period, the average number of hours between each removal, etc. 

Documenting module 200 receives the cap removal data from cap removal sensor 21 6, and 
encodes the data, thereby generating encoded cap removal data, hi the simplest 
embodiment, the encoded cap removal data is an encoded version of the cap removal data, 
but in preferred embodiments, it may additionally incorporate a user identifier, drug 
15 identifying data, a cap identifier, an insurance policy identifier or other pertinent 
information such as biometric data or a timestamp. 

The encoded cap removal data is displayed to user 1 1 6, as illustrated by reference 
numeral 120. This encoded data may take the form of a series of numeric digits or 
alphanumeric characters/digits. For example, the user may view a ten digit number 
20 representing the encoded data and type these digits into the keypad of his phone while 
connected to the central controller 300 via an interactive voice response unit ("IVRU"). 
The user might ahematively read out the digits of the encoded cap removal data to a human 
operator. 

Central controller 300 decodes the received encoded cap removal data and stores 
25 the decoded information. A third party may employ central controller 300 to determine and 
authenticate the number of times the user 1 16 removed the cap, thereby providing greater 
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5 assurance that the user has consumed the prescribed medication. Such compliance data 
could be used to lower insurance premiums in much the same way that motorists are 
rewarded with lower car insurance premiums for wearing safety belts. 

Referring now to Figure 2, the components of documenting module 200 are 
illustrated. Documenting module 200 includes a central processing unit ("CPU") 210, such 

10 as a Pentium Processor manufactured by INTEL or the like. CPU 21 0 receives input from a 
number of sources including clock 214, cap removal sensor 216, random access memory 
("RAM") 230, read only meraory ("ROM") 232, input device 218, output device 220, and 
data storage device 212. Clock 214 maintains an internal representation of the time/date 
and may be used to provide a timestamp that may augment the cap removal data. Clock 

15 2 1 4 may be used to track time of day, date, day of week or any other well known 
chronographic measurement. 

Cap removal sensor 216 supplies CPU 210 with an indication of the number of 
times that the cap has been removed and/or replaced. This sensor could take many forms. 
In one embodiment, a switch is used which is physically engaged when the top is placed on 

20 the pill container and which is disengaged when removed. Other functionally equivalent 
magnet switches or the like could be used so long as they give an accurate indication of a 
parameter rq>resenting the opening and closing of the pill container. The cap removal 
parameter generated by cap removal sensor 216 may represent one of a number of 
measurements. The cap removal data may include, for example, the number of cap 

25 removals in a particular period, the date and time of each of the last twenty removals, the 
number of pills dispensed over a given period of time, etc. For examples of cap removal 
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5 sensors, those of ordinary skill in the art may refer to US Patent number 4,939,705 to 
Hamilton, et al., the entirety of which is incorp>orated by reference herein. 

Another pill dispensing sensor technology that may be used in the present invention 
is described in U.S. Patent number 4,616,316 to Hanpeter et al., also incorporated by 
reference herein. The device of Hanpeter consists of a blister pack with an array of plastic 

1 0 blisters which define compartments for medication. The backing sheet has conductive 
traces which are respectively ruptured when the medication doses are removed. An 
electronic memory circuit detects the ruptures and stores the data over a period of time, 
performing a fimction similar to the cap removal sensor 216 of the present invention. 
Those of ordinary skill in the art will appreciate that any pill access sensing technology 

1 5 which is capable of generating an electronic signal may be used as cap removal sensor 2 1 6. 

Input device 218 may be employed by CPU 210 to receive external input such as a 
user identifier, a cap identifier, an insurance policy identifier, or a prescription identifier. 
A number of alternative devices may be employed to perform the function of input device 
218. Input device 218 may be a numeric keypad for receiving input fi-om a user. 

20 Alternatively, a biometric device, such as a fingerprint or retinal scanner could be 

employed as input device 218. Further, input device 218 could be a magnetic card reader 
or smart card reader for receiving data firom a card carried by a user. If input device 218 is 
a smart card reader, it may also operate as an output device to transmit an encoded 
measurement value to an associated smart card. Input device 218 might also incorporate 

25 speech recognition software so as to allow users to enter their user identifier via voice. 
Those of ordinary skill in the art will appreciate that many forms of input may be used. 
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CPU 210 is also configured to output data via output device 220. Output device 
220 is preferably a liquid crystal display ("LCD") unit, light emitting diode {"LED") or 
other conventional display unit that may be used to visually communicate information to 
user 1 1 6. This data may be represented as numeric or alphanumeric characters, or could 
take the form of a barcode or pulsed light display. Numeric characters could scroll slowly 
^ross a screen of output device 220 allowing for a large number of characters to be 
di^layed with a relatively small viewing area. Output device 220 could include one or 
more speakers to facilitate audible transmission to the user, allowing the user to simply 
hold up a telephone to the output device after a connection was made to central controller 
300 for DTMF transmission of the encoded cap removal data. In another embodiment, 
output device 220 includes a printer or memory device for permanently recording output. 
Output device 220 could also incorporate standard contacts for communication with smart 
card devices. 

CPU 210 is also connected to RAM 230 and ROM 232 for temporary and long- 
term storage requirements, respectively. ROM 232 could store cryptographic keys used to 
encode cap removal data, as well as a cap identifier which uniquely identifies the cap. Such 
a cap identifier may be encoded along with cap removal data before it is displayed to user 
116, allowing central controller 300 to authenticate the source of the cap removal data. 

CPU 210 is further configured to access data storage device 212. Data storage 
device 212 stores cap removal data table 400 which is described more fully with reference 
to Figure 4. Storage device 212 also includes instructions for implementing the 
documenting st^s of the present invention as described with reference to Figure 7. 
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5 Included within storage device 212 are encoding process instructions 250 which are the 
protocols used in encoding cap removal data. These instructions are executed by CPU 210, 
although a separate encoding processor could be employed in conjunction with CPU 210. 
Storage device 212 may store one or more cryptographic keys used in this encoding 
process, with a corresponding cryptographic key stored within data storage device 3 12 of 

10 central controller 300. Storage device 2 1 2 is preferably flash RAM, although it could also 
be a combination of RAM and ROM, optical disk drive, RAM drive or any other 
conventional storage device as wouJd be deemed appropriate by one of ordinary skill in the 
art. Flash RAM has the advantage of consxxming a small amount of space and being 
capable of storing data even when power is interrupted. 

15 Data storage device 212 may also store prescription data such as the nimiber of 

doses contained in that particular pill container or the desired time windows within which 
the drugs are to be consumed. This data could also be stored in RAM 230 or ROM 232. 

Data storage device 212 is also preferably capable of being updated periodically as 
new prescriptions are obtained. User 1 1 6 may thus obtain a documenting module 200 

20 which can be attached to pill containers that are discarded after use. Each time the user 
goes back to the pharmacy he is provided with a new pill container and new pills. The user 
brings documenting module 200 so that data and software stored in storage device 212 may 
be updated. In this way, revised prescription data may be conveniently entered. 

In order to physically secure documenting module 200, secure perimeter 202 may 

25 be employed to protect the elements responsible for generating the encoded cap removal 
data. Such a secure perimeter could provide tamper detection signals to CPU 210 for use 
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5 With encodmgprocess instructions 250, as discussed more fully with reference to Figure 6. 
one embodiment, secure perimeter 202 is a resin or similar substance applied to the 
indicated elements which is allowed to harden to form a protective shell. Any attempt to 
remove one or more chips from within the resin results in destruction of the chip or the loss 



of data. 



,0 Power requirements of documenting module 200 could be supplied through 

batteries. AC/DC adapter, or solar cells. A lithium battery (not shown) could supply small 
voltages to the components of documenting module 200. AC/DC adapters maybe used for 
those embodiments in which substantial power is needed for display or other purposes. 
Referring now to Figure 3, the components of central controller 300 include CPU 
15 310, clock 314, RAM 330. ROM 332, communication port 340, fateraclive Voice 
Response Unit ("IVRU") 345 and data storage device 312. Clock 314 is operativeiy 
connected to CPU 310 for maintaining and providing a chronographic measurement, such 
as time and date. Such measurements maybe useh:! in establishing an audit trail for 
documenting the communications received fi^m user 1 1 6. Communication port 340 is 
20 operativelyconnectedtoCPUSlOfortransmittingandreceivingdataovernetworkllS. 
m the preferred embodiment, communications from user 1 16 may be received through 
WRU 345 so that a simple phone call can be used for quick and efficient transmission of 
encoded cap removal data. Such an embodiment allows the user to transmit data without 
having a modem or direct comrection, allowing for off-line transmissions. In another 
25 embodiment,commumcationport340mayinterfaceCPU310toanI/Odevicecontrollable 
byahuman operator orasmart card reader.aliowinguserll6to download cap removal 
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data onto a smart card which is then presented to a third party (such as a local pharmacist) 
with direct communication links to central controller 300. 

Data storage device 312 is operatively connected to CPU 310 providing storage for 
and access to process instructions and data. Data storage device 312 stores decoding 
protocol table 500 and patient table 600, described more fully with reference to Figures 5 
and 6, respectively. Storage device 312 further includes decoding process instructions 350, 
for implementing the steps of the present invention as described below with reference to 
Figure 8. Storage device 312 could take the form of a conventional disk drive employing 
magnetic media, a CD or DVD drive, optical disk drive, RAM drive or any other 
conventional storage device as would be deemed appropriate by one of ordinary skill in the 
art. 

CPU 310 is operatively connected to RAM 330 and ROM 332 for temporary and 
permanent storage requirements, respectively. ROM 332 could store cryptographic keys 
used to decode cap removal data. 
Data Tables 

Referring now to Figures 4 through 6, the data tables associated with an exemplary 
embodiment of the present invention will be dracribed. According to one exemplary 
embodiment, a health insurance provider employs the present invention to reward policy 
holders with lower premiums in the event that they comply with the instructions of the 
prescriptions provided to them. 

Figure 4 illustrates the contents, in tabular format, of an exemplary cap removal 
table 400 of documenting module 200. Cap removal table 400 provides a log detailing the 
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5 usage of a particular prescription, storing data generated by cap removal sensor 2 1 6. Each 
record of cap removal table 400 corresponds to a particular cap removal event, and 
includes an open date/time 410 and a close date/time 420. Open date/time 410 and close 
date/time 420 represent the beginning and ending times of the corresponding cap removal, 
respectively. Other typ« of chronographic data may be stored as described above. The 

10 number of records in cap removal table 400 indicates the number of times that the cap has 
be^ removed from the pill container. Records of the table may be aggregated to form 
weekly or monthly totals. 

The exemplary cap removal table 400 includes four records. Record 440 represents 
a cap removal event which occurred on 3/05/98, with the cap opened at 9:43 AM and 

15 replaced at 9:36 AM. The cap removal data is stored in field 410 when the cap is removed 
(opened) and is stored in field 420 when the cap is replaced (closed). One of the advaBtages 
to storing the times of access is that some medications are much more effective at certain 
hours of the day, making documented cap removal data much more valuable to a third 
party. Data stored with data table 400 may be periodically deleted by CPU 210 if storage 

20 space is constrained. 

Referring now to Figure 5, there is illustrated an exemplary decoding protocol table 
500 of central controller 300. Each record of decoding protocol table 500 stores data 
associated with a particular documenting module 200. The contents of cap identifier field 
510 uniquely identify each record of table 500. Key field 520 stores one or more keys used 

25 by that particular documenting module 200 to encode/decode cap removal data. Although 
key field 520 shows a plurality of keys, those of ordinary skill in the art will appreciate that 



14 



wo 00/19962 



PCT/US99/21895 



5 a single universal key could be used for each documenting module 200. In such an 
embodiment, the universal key might be stored in ROM 332. User identifier field 530 
represents the user assigned to that particular cap identifier. Such data could be registered 
by the user via communications port 340 or could be received from the pharmacy which 
filled the prescription. The user identifier could also be assigned by central controller 300. 

10 Record 540 of decoding protocol table 500 represents a particular cap with an 

identifier of "lA2B3C4D."This cap has an associated key 520 of "001 lOOllOlOlOlOl" 
which corresponds to user "USR0003." 

Referring now to Figure 6, there is illustrated an exemplary patient table 600. Each 
record of patient table 600 represents data associated with particular patient. User 

1 5 identifier fi eld 6 1 0 stores data representing the purchaser or user of the pill container. 

Those of ordinary skill in the art will appreciate that the user identifier could be the user's 
name, social security number, policy number, password, PIN, etc. Username field 620 
stores his or her name. Address field 630 stores the street address of the user, while phone 
number field 635 identifies a contact phone number for the user, allowing central controller 

20 300 to call the user to requ^t encoded cap removal data. Policy identifier field 640 is used 
in those esmbodiments in which discounts may be applied to a user's policy. Account 
identifier field 650 identifies a financial account such as a credit card number or checking 
account number. This account could be used to reward or penalize the user 1 1 6 based on 
the received cap removal data. 

25 In one embodiment, user compliance may be authenticated through the decoding of 

the received encoded cap removal data. The user may be rewarded with a discounted 
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5 monthly insurance premium to reflect the lower expected probability of future 

complications. Other rewards could include a fixed discount off of future prescriptions, or 
a decrease in the amount of the deductible for hospital visits associated with the condition 
for which the drugs were prescribed. 

Tampering indication field 660 stores an indication of whether or not secure 
10 perimeter 202 has been breached. This tampering indication is generated by CPU 210 and 
transmitted to central controller 300 via encoded cap remova! data. 

The exemplary patient table 600 includes four records. Record 670 stores 
information about the user "JOHN SMITH" whose user identifier is "456123." Address 
field 630 indicates that he lives at "22 RIVER PL. METROPOLIS, USA" and that his 
15 phone numlwr is "(345) 123-4567." He has an insurance policy identified as "POL0002" 
and has an account identifier of "601 1-2468-9090-1048" for use in those embodiment 
requiring billing or the provision of rewards. Field 660 stores an indication that there has 
been "NO" tampering detected. 

20 A pparatus Operation 

Having thus described the architecture and components of the present invention, the 
operation of documenting module 200 and central controller 300 will now be described in 
^ater detail with reference to Figures 7 and 8, and continuing reference to Figures 1-6. 
Referring now to Figure 7, a flowchart is presented illustrating the process steps 
25 implemented by CPU 2 1 0 of documenting module 200. At step 710, CPU 2 1 0 

accinnulates data indicating that the cap has been removed by receiving signals fiom sensor 
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216, a switch which is physically engaged when the top is removed or replaced. Sensor 216 
could generate data for both removals and replacements, or it could be limited to sensing 
only removals or only replacements. At step 712, this data is stored in cap removal data 
table 400. In a preferred embodiment, data regarding every cap removal is stored, although 
data could of course be selectively stored if memory limitations were a constraint. For 
example, every fifth cap removal could be stored or every cap removal occurring between 
the hours of 2:00 PM and 6:00 PM. In another embodiment, cap removal data represents 
only an indication of whether or not the cap has been removed within the parameters 
described by the prescription. Thus, data storage device 212 of documenting module 200 
stores a positive value if the patient has removed the cap once every day between the hours 
of 3:00 PM and 9:00 PM, and stores a negative value if one or more days have elapsed in 
which the cap was not removed within this window. Sensor 216 could also transmit cap 
removal data to CPU 210 only a fixed number of times within a given period. For example, 
the maximum number of transmitted cap removals within a twenty-four hour period might 
be two. Such a restriction would make it impossible for a user to generate false cap 
removal data by repeatedly opening and closing the cap within a short period of time. A 
user with a month long prescription, for example, might realize at the end of the month that 
he had forgotten to take his medication. Trying to generate a month's worth or cap removal 
data would be futile since only two cap removal events would be recorded within each 
twenty four hour period. Although described as being stored in cap removal data table 400, 
those of ordinary skill in the art will ^preciate that c^ removal data could alternatively be 
stored in RAM 230 or some other type of chip based memory within documenting module 
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200. 



At step 71 4, this stored data representing a measurement of the number of cap 
removals is retrieved by CPU 210. In one embodiment, CPU 210 retrieves the number of 
records within cap removal data table 400 in order to determine the number of times that 
the cap has been removed. For many prescriptions, this will be a number ranging from ten 
10 to a hundred, depending on the period of time covered. CPU 210 next retrieves encoding 
process instructions 250 from data storage device 212 at step 716. These instructions are 
executed at step 718 and applied to the cap removal data retrieved at step 714. For 
example, if the number of cap removals is "36" the resulting encoded cap removal data 
may be "34891 12073." The advantage of encoding the cap removal data is that the user is 
1 5 not able to lie about the number of cap removals when presenting the data to a third party. 
Without knowing the encoding protocols, the user does not know the encoded equivalent 
of any set of cap removal data, thus preventing the user from fabricating false cap removal 
data. Although the user could simply make up a number to represent false cap removal 
data, the probability that it represented a reasonable number of cap removals when decoded 
20 would be made vanishingly small . 

The instructions of step 718 maydirectCPU210toperformany type of encoding 
commonly used to render data secure. Examples include symmetric key encryption, public 
key encryption, hash algorithms, digital signatures, and the like. If lower levels of security 
are required, substitution ciphers or transposition ciphers may be appropriate. Common 
25 types of encoding are described in "Applied Cryptography, 2nd Edition" by Bruce 
Schneier, 1996. 
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5 Although Step 71 8, as illustrated, represents the steps required to encode the 

number of times the cap has been removed, it may also include steps for encoding other 
data in addition to the cap removal data, including the user identifier, the cap identifier, a 
beginning timestamp and an ending timestamp. The user may also enter the number of 
pills that he takes at each cap removal event, entering the information into input device 

10 2 1 8. In one embodiment, a cap identifier is stored in ROM 2 32 of documenting module 
200. CPU 210 retrieves this cap identifier and concatenates it with the cap removal data 
retrieved at step 714. The resulting combined data is then encoded as described above. The 
advantage of this embodiment is that when the encoded cap removal data is decoded by 
centra! controller 300, the identity of the cap may be authenticated in addition to the 

1 5 number of cap removals, preventing a user fi^om providing the encoded cap removal data 
from another user's documenting module 200. The encoding process of step 71 8 may also 
incorporate results from an integrity test of secure perimeter 202. Should CPU 210 detect 
that the secure perimeter had been breached, an indication is concatenated with the cap 
removal data prior to the encoding process. Decoding by central controller 300 then reveals 

20 evidence of the breach. 

The retrieval of cap removal data at step 714 and the subsequent encoding at steps 
716 and 71 8 may be scheduled to occur at prescribed dates, such as the first day of each 
month or the date at which the prescription is scheduled to run out. The steps may also be 
performed upon request by user 1 1 6. In this embodiment, the user actuates a button of 

25 input device 21 8 of documenting module 200, the actuation signaling CPU 21 0 to perform 
the encoding operation. 
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At step 720, CPU 210 outputs the encoded cap removal data. The step of 
outputting the encoded cap removal data may be performed in a number of ways. In a 
preferred embodiment, the encoded cap removal data is output via output device 220 for 
viewing by the user. The user may then initiate a phone call to IVRU 345 of central 
controller 300 and type in the displayed encoded cap removal data using the touch tone 
keys of his telephone. Such a process has the advantage of simpHcity and low cost. No 
modem or online connection is required. Users may be entered into sweepstakes drawings 
every time that they call in with encoded cap removal data, encouraging greater 
participation rates. The probability of winning the sweepstakes could even be based partly 
on the degree to which the user complied with the prescription instructions. 

Input device 218 could incorporate a switch or button, actuated by user 1 16 to 
control the display of output device 220. Such an embodiment would allow the user to 
select whether to view the cap removal data in encoded or non-encoded form. 

In an alternate embodiment, the encoded cap removal data may be output to a smart 
card or magnetic stripe card via an appropriate interface (not shown). The user could insert 
a smart card into an electrical contact of output device 220, initiating the transfer of data to 
the smart card. This smart card could then be mailed to the coitral controller 300 for 
decoding, or inserted into a reader device {such as a kiosk) at a hospital or pharmacy for 
later transmission to central controller 300. 

It should be noted that the functionality of step 720 may include outputting data in 
addition to the encoded cap removal data. For example, the user identifier, a beginning 
timestamp and an ending timestamp may be output in either an encoded or non-encoded 
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format As described with respect to the encoded cap removal data, the step of outputting 
may be accomplished via output device 220 or an appropriate smart card or magnetic stripe 
card interface. 

Referring now to Figure 8, a flowchart is presented illustrating the computer 
implemented process steps of authenticating the received encoded cap removal data. At 
step 810, central controller 300 receives the encoded cap removal data, user identifier and 
cap identifier fi"om user 116. Preferably, the encoded cap removal data is transmitted by 
the user via IVRU 345, however the user may alternatively employ a smart card or 
equivalent device which may be ph>«icaily delivered to an operator of central controller 
300. In the preferred embodiment, the encoded cap removal data may also include 
additional encoded information such as a beginning timestamp, an ending timestamp, a 
secure perimeter test result, or a diagnostic test result as described with reference to Figure 
7. 

At step 812, central controller 300 retrieves decoding process instructions 350 fi-om 
data storage device 312 and then executes these instructions at step 814 to decode the 
received cap removal data in order to derive a parameter indicative of the decoded cap 
removal data. In the preferred embodiment, additional data may be derived firom the 
encoded cap removal data. According to the preferred embodiment, step 814 includes the 
steps of deriving a beginning timestamp, an ending timestamp, the secure perimeter test 
result or a diagnostic test result. 

For those embodiments in which cap removal data is encoded by calculating a hash 
value associated with the cap removal data, central controller 300 executes decoding 
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5 process instructions 3 50 to apply the same hash algorithm to the cap removal data to 

deteraiine the associated hash value. If the two hash values are the same, the cap removal 
data has been authenticated. 

At step 814, central controller 300 may additionally determine whether the secure 
perimeter of doctimenting module 200 has been breached. Although this determination 

10 may be effected in a number of conventional ways, in the present embodiment, the 

determination is made based on the secure perimeter test result decoded at step 814. If 
central controller 300 determines that the secure perimeter has been breached, central 
controller 300 is directed to store an indication within the tampering indication field 660 of 
patient database 600. 

J 5 At step 8 1 6, CPU 3 1 0 outputs the result of decoding step 8 1 4 to the user, providing 

immediate feedback as to the documented cap removal data. This output may be in audio 
form, provided via IVRU 345 or communications port 340. The decoded cap removal data 
is then stored at step 818 in patient table 600. 

CPU 310 may additionally update user data stored within data storage device 312 

20 based on the decoded cap removal data. For example, a user record may be flagged to 
indicate that the patient had not complied with the instructions of his prescription, or that 
he had complied with only the bare minimum required. Historical user data such as this 
could provide the basis for rewanls or penalties, and could serve as a basis for making 
pricing decisions for future insurance coverage. Users might be provided with higher 

25 reimbursement levels for drugs for which they had complied with the prescription 

inshnctions. For example, a user might pay $1 00 for a prescription, with the insurance 
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5 provider reimbursing one quarter of that amount if the user does not comply with the 
prescription requirements, and one half of that amount if he does comply with the 
requirements. Insurance companies might also require that the user call in with encoded 
cap removal data before any reimbursements are provided. 

It should also be recognized that documenting module 200 may include additional 

10 processing instructions to store cap removal statistics associated with a user, and may 

output an encoded cap removal code only upon reaching a predetermined reward threshold. 
Thus, encoding process instructions 250 could include code which outputs encoded data 
only when the user opens the pill container a number of times equal to the number of doses 
stored within the container. 

15 A fiirther application of the present invention enables a pharmaceutical supplier to 

offer rebates to purchasers of pharmaceuticals based on usage. Alternatively, a physician 
could provide a money back guarantee provided a user conforms with the prescription for a 
specified period of time. 

Yet another application of the present invention enables medical service providers 

20 such as doctors, health maintenance organizations and insurance companies to offer 
preferred rates to their clients who consistently follow prescription instructions. By 
employing the present invention, any medical service provider may verify prescription 
compliance. 

The disclosed method and apparatus for authenticating cap removal data may be 
25 applied to a number of commercial applications. For example, drug testing trials 
commonly involve dispensing drugs to a number of test subjects. These subjects are 
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5 monitored to determine the efficacy of the drug, with the results provided to a governing 
authority such as the Food and Drag Administration for approval. Subjects who do not take 
the medication according to the prescribed schedule will of course negatively impact the 
results, so drug companies coold use the authentication procedure of the present invention 
to eliminate bad data from the study. 
10 While the best mode for carrying out the invention has been described in detail, 

those familiar with the art to which the invention relates will recognize various alternative 
designs and embodiments for practicing the invention. These alternative embodiments are 
within the scope of the present invention. Accordingly, the scope of the present invention 
embodies the scope of the claims appended hereto. 
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We claim: 

1 . A method for documenting cap removal data, the method including the steps of: 
measuring a number of cap removals; 

determining cap remov^ data based on the number of cap removals; 
encoding the cap removal data to derive encoded cap removal data; and 
outputting the encoded cap removal data. 

2. The method of claim 1 iurther including the step of receiving a user identifier 
representing an identity of the user; and wherein the step of encoding includes encoding 
the user identifier. 

4. The method of claim 2 wherein the step of receiving the user identifier includes 

reading a magnetic stripe card. 

5. The method of claim 2 wherein the step of receiving the user identifier includes 
receiving input from a keypad. 

6. The method of claim 1 wherein the step of encoding includes executing 
cryptographic protocols. 

7. The method of claim I wherein the stqj of encoding includes retrieving a stored 
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5 key. 

8. The method of claim 1 wherein the step of encoding includes encoding a 
tampering indication, 

9. The method of claim 1 wherein the step of outpntting includes the steps of: 
transmitting a signal to a display device; and 

10 displaying the encoded cap removal data. 

10. The method of claim 1 wherein the step of outputting includes the steps of: 
transmitting a signal to an audio output device; and 

outputting the encoded cap removal data in an audible form. 

1 1 . The method of claim 1 wherein the step of outputting includes the steps of: 
15 transmitting a signal to a memory device; and 

storing the encoded cap removal data. 

1 2. The method of claim 1 wherein the step of outputting includes the step of: 
transmitting a signal to a smart card device. 

13. The method of claim 1 further including the step of receiving a cap identifier 
20 representing an identity of a documenting module; and wherein the step of encoding 

includes encoding the cap identifier. 
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5 14. The method of claim 1 further including the step of determining a timestamp 
representing a time associated with the cap removal data; and wherein the step of 
encoding includes encoding the timestamp. 

1 5. The method of claim 1 4 wherein the timestamp rqjresents the time of at least one 
cap removal. 

10 16. A method for documenting cap removal data, the method including the steps of: 
measuring the chronogr^hic data associated with removals; 
determining cap removal data based on the chronographic data; 
encoding the cap removal data to derive encoded cap removal data; and 
outputting the encoded cap removal data. 

15 17. The method of claim 1 6 wherein the chronographic data represents a time. 

1 8. The method of claim 1 6 wherein the chronographic data represents a duration. 

1 9. A method for authenticating documented cap removal data, the method including 
the steps of: 

receiving from a user encoded cap removal data; 
20 decoding the encoded cap removal data to derive a parameter indicative of the cap 

removal data; 

verifying the authenticity of the decoded cap removal data; and 
27 
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5 updating user data based on the cap removal data. 

20. The method of claim 19 fiirther including the step of outputting at least a portion 
of the user data. 

2 1 . The method of claim 1 9 iurther including the step of determining a reward 
amount based on the user data. 

10 22. The method of claim 1 9 further including the step of determining a penalty 
amoimt based on the user data. 

23. The method of claim 1 9 wherein the step of decoding the encoded cap removal 
data includes decoding a cap identifier. 

24. The method of claim 1 9 wherein the step of decoding the encoded cap removal 
1 5 data includes decoding a policy identifier. 

25. The method of claim 1 9 wherein the step of decoding the encoded cap removal 
data includes decoding a tampering indication. 

26. The method of claim 1 9 wherein the step of decoding includes executing 
cryptogrs5)hic protocols. 
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27. The method of claim 1 9 wherein the step of decoding includes retrieving a stored 
key. 

2 8 . The method of claim 1 9 wherein the step of verifying includes comparing cap 
removal data with decoded cap removal data. 

29. A pill bottle cap apparatus comprising: 
an input device; 
an output device; 

a memory configured to store cap removal data; and 
a processor operativeiy coupled to the memory to: 
measure a number of cap removals; 

determine cap removal data based on the number of cap removals; 
encode the cap removal data to derive encoded cap removal data; and 
output the encoded cap removal data. 

30. The apparatus of claim 29 wherein the mput device is operative to read a magnetic 
stripe card. 

3 1 . The apparatus of claim 29 wherein the input device is operative to receive a signal 
from a smart card device. 

32. The apparatus of claim 29 wherein the processor is further operative to execute a 
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hash function. 

33. The apparatus of claim 29 wherein the processor is further operative to transmit a 
signal to a display device and to display the encoded cap removal data. 

34. The apparatus of claim 29 wherein the processor is further operative to transmit a 
signal to an audio output device and to output the encoded cap removal data in an audible 
form. 

35. The apparatus of claim 29 wherein the processor is further operative to transmit a 
signal to a smart card device. 

36. The apparatus of claim 29 wherein the processor is further operative to receive a 
cap identifier representing an identity of a documenting module, and to encode the cap 
identifier. 

37. The apparatus of claim 29 wherein the processor is further operative to determine 
a timestamp representing the time of at least one cap removal. 

38. An apparatus for authenticating' documented cap removal data, the apparatus 
comprising: 

an input device; 
an output device; 
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a memory configured to store a parameter indicative of the cap removal data; and 
a processor operatively connected to the memory to: 
receive from a user encoded cap removal data; 

decode the encoded cap removal data to derive a parameter indicative of 
the cap removal data; 

verify the authenticity of the decoded cap removal data; and 
update user data based on the cap removal data. 

39. The apparatus of claim 38 wherein the processor is further operative to output at 
least a portion of the user data. 

40. The apparatus of claim 38 wherein the processor is further operative to retrieve 
historical user data and compare the parameter to the historical user data. 

41 . The apparatus of claim 38 wherein the processor is further operative to decode a 
cap identifier. 

42. A pill bottle cap apparatus comprising: 
means for measuring a number of cap removals; 

means for determining cap removal data based on the number of cap removals; 
means for encoding the cap removal data to derive encoded cap removal data; and 
means for outputting the encoded cap removal data. 
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5 43 . The pill bottle cap apparatus of claim 42 further including means for receiving a 
user identifier representing an identity of the user, and wherein the means for encoding is 
operative to encode the user identifier. 

44. The pill bottle cap apparatus of claim 42 wherein the means for encoding is 
operative to execute cryptographic protocols. 

10 45. The pill bottle cap apparatus of claim 42 further including means for receiving a 
cap identifier representing an identity of a documenting module; and wherein the means 
for encoding is iterative to encode the cap identifier. 

46. A cap removal authentication apparatus comprising: 
means for receiving fi-om a user encoded cap removal data; 

15 means for decoding the encoded cap removal data to derive a parameter indicative 

of the cap removal data; 

means for verifying the authenticity of the decoded cap removal data; and 
means for updating user data based on the cap removal data. 

47. The cap removal documentation apparatus of claim 46 wherein the means for 
20 decoding is operative to execute cryptognqihic protocols. 

48. A computer-readable storage mediiun encoded with processing instructions for 
directing a computer to perform the steps of: 

32 
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5 measuring the number of cap removals; 

detennining cap removal data based on the number of cap removals; 
encoding the cap removal data to derive encoded cap removal data; and 
outputting the encoded cap removal data. 

49. A computer-readable storage medium encoded with processing instructions for 
10 directing a computer to perform the steps of: 

receiving from a user encoded cap removal data; 

decoding the encoded cap removal data to derive a parameter indicative of the cap 
removal data; 

verifying the authenticity of the decoded cap removal data; and 
15 updating user data based on the cap removal data. 
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